References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-HfwnRgk https://nvd.nist.gov/vuln/detail/CVE-2024-20414 https://www.rapid7.com/db/vulnerabilities/cisco-xe-cve-2024-20414/ https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-webui-csrf-ycUYxkKO.html https://www.sentinelone.com/vulnerability-database/cve-2024-20414/ https://github.com/advisories/GHSA-m9jx-f6w8-8hj9 https://vuldb.com/vuln/278495 https://attackerkb.com/topics/GfXBUMMAxs/cve-2024-20414 https://www.tenable.com/plugins/nessus/207786 https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75169
Related VulnerabilitiesAxios 服务器端请求伪造漏洞(CVE-2026-40175)PoCCVE-2020-15718: RosarioSIS 6.7.2 - Cross-Site ScriptingPoCCVE-2019-5591: FortiOS - Insecure LDAP Configuration DetectionNagios XI-默认口令漏洞Cisco IOS 缓冲区溢出漏洞Fortinet FortiOS等 签名验证不当漏洞Nagios Log Server 需授权 命令注入漏洞Nagios Log Server 权限管理不当漏洞Cisco IOS XE Software 命令注入漏洞